privacy
Nothing collected. Nothing kept.
This is the privacy policy for hausfold.co: the website, the install scripts it serves, and its machine-facing endpoints (the docs search API and the MCP server). For Perch, the Mac app, there is a separate policy of its own.
What we collect
Nothing.
There are no accounts, no sign-ins, no cookies, no analytics service and no error reporter on this site. Nothing on it asks who you are, and nothing on it follows you from page to page. The downloadable apps' release artifacts (pounce, perch) are signed and notarized in each product's own release process; the website is not in that loop.
What the network sees anyway
Cloudflare serves this site, so Cloudflare's edge sees the standard record any web server sees: your IP address, the URL you asked for, and the time. We run no analytics over that record and build no profile from it. It is traffic noise, not data about you.
The one thing held briefly
The MCP server and the REST surface rate-limit by IP address, so one noisy client cannot crowd out everyone else. The counter lives in the Worker's own working memory, keyed on the connecting IP, and expires after 60 seconds. It is never written to disk or to a database, because there is no database: hausfold.co is a static site and a Worker that holds nothing keyed to you.
What leaves this site
When you (or an agent) ask for an app's latest release, the Worker calls GitHub's public API from Cloudflare's servers to find it. GitHub sees that server-side request, not you: your IP address does not travel with the question.
Changes
If any of this stops being true (a sign-in, a counter that persists, an analytics SDK), this page changes before the code ships, not after.